                                (conj dns-alt-names-list master-certname) false))
         alt-names-ext-list (if alt-names-ext [alt-names-ext] [])
         base-ext-list      [(utils/netscape-comment
-                              ns-comment)
+                              netscape-comment)
                             (utils/authority-key-identifier
                               ca-public-key false)
                             (utils/basic-constraints-for-non-ca true)

  "The parent OID for all Puppet Labs specific X.509 certificate extensions."
  "1.3.6.1.4.1.34380.1")

(def ns-comment
  "Standard value applied to the Netscape Comment extension for certificates"
  "Puppet Server Internal Certificate")


   ca-serial :- (schema/pred number?)
   ca-public-key :- (schema/pred utils/public-key?)]
  [(utils/netscape-comment
     netscape-comment)
   (utils/authority-key-identifier
     ca-name ca-serial false)
   (utils/basic-constraints-for-ca)
